Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
File: API1ekH05ZC6Yudx0gVOAI4O2R4.mft (raw, json)
Hash identifier: dvuhu8ZzaDJlmjLVtolXR49Fkx1EDseGny7RcptvZTM=
Subject key identifier: 36:32:D5:4E:C8:10:86:2D:2D:90:BC:41:79:98:D2:57:9B:40:51:11
Authority key identifier: 00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
Certificate issuer: /CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Certificate serial: 019D2A3C64F7567BAD33979750B4DF578A47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
Manifest number: 09A3
Signing time: Thu 26 Mar 2026 13:01:34 +0000
Manifest this update: Thu 26 Mar 2026 13:01:34 +0000
Manifest next update: Fri 27 Mar 2026 13:01:34 +0000
Files and hashes: 1: API1ekH05ZC6Yudx0gVOAI4O2R4.crl (hash: LAbdIy+J8trpru8Etk7jNQ21CV/1aszF016CHy1QvEA=)
2: Oqp0LnSyxA2FjpucrV--rkFrY9M.roa (hash: dShE79kR6w3t9UN+uBV7ehXeiyGLd3Stfbk1UBF24b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:64:f7:56:7b:ad:33:97:97:50:b4:df:57:8a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Validity
Not Before: Mar 26 13:01:34 2026 GMT
Not After : Mar 27 13:01:34 2026 GMT
Subject: CN=3632d54ec810862d2d90bc417998d2579b405111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:23:f7:8a:64:f8:45:c9:44:a6:c9:61:4f:46:
61:91:2e:d1:a6:87:b8:e1:ad:48:10:66:02:bf:16:
69:17:5f:e9:49:d0:e3:9f:12:80:bd:cb:b2:2c:4c:
d5:64:fa:67:61:2d:19:87:a5:e8:c3:4f:8e:ba:1d:
7f:09:d3:6c:b7:6e:75:a5:c8:ac:d3:9d:d7:fa:c9:
fd:58:99:46:bf:18:b6:b5:54:74:6e:92:c7:7c:be:
2e:c1:be:f9:a4:9b:0e:1a:77:09:a5:b4:3e:41:43:
ab:ba:48:86:62:c3:2a:77:ef:93:9d:08:38:c8:b8:
33:d0:15:59:8c:3d:e9:fe:35:94:dd:7d:a9:29:fe:
00:d7:fd:4b:7b:2b:80:4b:e2:5a:b0:41:47:e5:eb:
9d:57:90:86:7c:19:5d:8e:0b:9f:6c:98:73:8a:f2:
4e:04:a3:91:d0:3a:54:8b:58:60:33:d8:05:10:e0:
03:53:0f:aa:16:bf:d6:54:88:ab:39:a4:d8:62:df:
1f:cd:c6:2c:1c:ec:60:92:f0:2c:d7:be:09:d1:37:
ce:cf:b4:e8:97:4e:34:5d:ad:51:24:a9:6e:cd:cf:
e6:17:b0:3c:68:ac:05:15:b9:26:a7:b7:d7:2b:1d:
92:ee:8f:cb:51:de:0f:77:13:e4:15:3c:e8:d4:88:
c3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:32:D5:4E:C8:10:86:2D:2D:90:BC:41:79:98:D2:57:9B:40:51:11
X509v3 Authority Key Identifier:
keyid:00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:f3:4d:10:0c:2f:75:26:34:13:b4:ca:8a:5a:c4:ad:c7:b1:
b5:f2:30:c2:bd:c9:c5:d9:f5:b4:22:40:61:68:89:e6:13:a0:
66:bb:d9:2c:47:b7:3b:a7:df:d5:4b:1a:17:9b:c6:01:e8:de:
28:a8:fc:39:7e:93:84:a9:97:19:bf:49:22:e8:87:e8:63:7f:
53:33:6a:e5:22:82:a6:bf:2a:96:19:10:01:0f:f1:30:48:71:
bc:fe:ac:e9:8e:98:43:01:8f:25:ae:c9:fc:01:60:fe:6e:04:
4b:97:43:94:43:72:01:0f:9f:04:8a:2c:a2:73:aa:93:84:72:
87:a6:e1:88:8d:e8:06:ce:a8:c6:b8:e5:2a:00:3e:1d:89:93:
42:0a:71:a7:34:e8:c2:fc:75:fa:99:2b:a6:44:22:57:eb:9c:
aa:99:f2:c5:3e:46:ee:f1:9e:4a:bb:ae:cd:d1:5d:47:f6:69:
bf:94:b1:11:4f:09:cb:78:7f:4f:3d:85:18:8e:6b:bb:f1:43:
30:fe:96:d4:fa:e3:e2:1b:7e:ab:b7:d8:34:9a:a0:d5:3f:a2:
71:f2:fb:f3:ed:8e:45:22:5a:97:aa:75:0b:cd:08:ba:3c:6d:
c1:2f:06:9e:eb:be:43:43:86:61:7d:15:ac:36:8d:ab:e2:82:
d3:5e:82:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:48:02 2026 by rpki-client